Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/ZgKWWn0_f_vztR7fFOO7zC3ztpo.mft
File: ZgKWWn0_f_vztR7fFOO7zC3ztpo.mft (raw, json)
Hash identifier: R3GKcfS7/0e3Xs/z1ejnKXeHgnxkrnk1mW5vCk5HrvE=
Subject key identifier: A0:F8:BF:34:6C:2B:66:4A:B0:BC:55:8D:86:0C:D9:86:09:0B:8E:BB
Authority key identifier: 66:02:96:5A:7D:3F:7F:FB:F3:B5:1E:DF:14:E3:BB:CC:2D:F3:B6:9A
Certificate issuer: /CN=6602965A7D3F7FFBF3B51EDF14E3BBCC2DF3B69A
Certificate serial: 0169
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZgKWWn0_f_vztR7fFOO7zC3ztpo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/ZgKWWn0_f_vztR7fFOO7zC3ztpo.mft
Manifest number: 0166
Signing time: Sun 13 Apr 2025 08:37:41 +0000
Manifest this update: Sun 13 Apr 2025 08:37:41 +0000
Manifest next update: Tue 15 Apr 2025 08:37:41 +0000
Files and hashes: 1: EjNpMXXvvVCwyFGWyMubdtB2030.roa (hash: buZM3Uc7yt29XNlsfjEbiJShEjAL9a1I5Rfck0Eo4CY=)
2: ZgKWWn0_f_vztR7fFOO7zC3ztpo.crl (hash: RzsgEd5HFHrwtXe1/7v1pKBAab1yezEA8k+t8l1AyyQ=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/ZgKWWn0_f_vztR7fFOO7zC3ztpo.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/ZgKWWn0_f_vztR7fFOO7zC3ztpo.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/ZgKWWn0_f_vztR7fFOO7zC3ztpo.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 14 Apr 2025 20:38:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6602965A7D3F7FFBF3B51EDF14E3BBCC2DF3B69A
Validity
Not Before: Apr 13 08:37:41 2025 GMT
Not After : Dec 26 15:30:27 2025 GMT
Subject: CN=A0F8BF346C2B664AB0BC558D860CD986090B8EBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a9:c0:f9:d6:56:11:68:14:3f:24:70:ef:76:
42:51:f9:ff:82:22:2a:40:9e:6e:eb:99:cb:f5:36:
fd:bb:41:a6:61:df:9e:98:85:78:8b:c4:38:62:8d:
de:6b:11:76:33:03:44:ee:eb:e5:c5:f0:cc:2d:6b:
fc:d1:f4:b3:18:54:44:d3:e8:dd:7e:a1:e5:a0:7f:
b0:6b:3d:5e:10:b3:c4:54:87:8e:04:c2:f0:53:33:
a8:ef:82:b9:4e:e5:89:e3:be:ad:f3:bf:bf:74:e9:
73:40:35:e9:77:c4:1c:ec:12:f2:17:27:7c:45:7a:
89:e5:3d:a9:30:85:3c:24:39:c9:00:18:79:15:3b:
ff:8b:9f:5b:61:9f:b2:91:93:f8:78:04:6b:62:ad:
be:ce:ce:c4:20:b8:88:d4:ba:e4:77:6c:33:2b:96:
b6:62:c6:ef:bf:b1:59:7c:c8:9d:13:dd:83:92:dd:
ad:f9:4f:ea:d8:59:b8:77:4b:87:f8:f1:69:bb:3d:
ac:b5:7c:ee:56:3d:f3:36:92:50:10:8f:e3:27:2c:
af:85:a1:db:a4:62:43:86:ff:e8:d0:c5:57:cb:ea:
33:9b:a7:b5:ad:a8:6d:5b:01:70:72:a8:af:f3:28:
1c:a8:8d:e8:48:e1:66:08:0c:c9:46:9d:84:ef:35:
58:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F8:BF:34:6C:2B:66:4A:B0:BC:55:8D:86:0C:D9:86:09:0B:8E:BB
X509v3 Authority Key Identifier:
keyid:66:02:96:5A:7D:3F:7F:FB:F3:B5:1E:DF:14:E3:BB:CC:2D:F3:B6:9A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/ZgKWWn0_f_vztR7fFOO7zC3ztpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZgKWWn0_f_vztR7fFOO7zC3ztpo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/ZgKWWn0_f_vztR7fFOO7zC3ztpo.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:38:fa:05:a5:99:45:3b:20:99:b9:a3:78:98:4e:f0:7c:82:
c1:fd:29:8f:86:b0:e3:41:f3:99:f9:cb:da:ad:7e:60:b1:1d:
2a:77:8a:b6:e4:26:58:6c:68:4f:ca:e4:b6:66:de:b0:50:01:
f2:7d:9d:61:3a:d8:7e:ad:e8:11:32:6d:3b:2c:3a:67:8f:80:
78:12:5e:b2:7f:0f:f8:15:ef:c3:5b:5c:70:f2:75:de:ac:d9:
42:3b:d9:02:5b:14:3b:f5:eb:db:12:0e:2e:4f:95:14:d3:61:
e0:11:01:3b:24:d2:a1:bb:5d:78:84:bd:fa:63:a5:b6:da:cd:
37:27:b0:b5:3c:2c:64:c2:42:08:e2:4b:ff:5f:48:02:85:d8:
bb:42:bf:8a:0e:af:c8:51:1d:10:7c:15:b1:57:0e:c4:42:74:
db:18:e8:de:84:d6:39:71:90:aa:7a:3a:37:03:fa:9c:bf:08:
27:ba:1d:98:6a:76:65:97:55:dc:a5:9b:cb:02:bb:a7:dc:65:
af:78:33:a9:b6:41:08:03:5a:9c:0a:e6:22:fe:52:52:0c:ae:
af:71:b9:16:44:42:a3:e0:8d:ac:e5:2f:0d:c1:a2:54:86:85:
8d:30:4b:8b:7e:4f:6b:51:98:4c:b6:19:2a:a7:0c:62:39:93:
43:ae:cf:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 18:16:55 2025 by rpki-client